🇺🇸
threatx
2024-11-27 22:58:38
(1 year ago)
Common blacklisted IPs across tenants
DDoS Attack
Bad Web Bot
Web App Attack
🇺🇸
threatx
2024-11-26 08:22:06
(1 year ago)
Common blacklisted IPs across tenants
DDoS Attack
Bad Web Bot
Web App Attack
2024-11-24 19:48:12
(1 year ago)
$f2bV_matches
Brute-Force
2024-11-21 17:48:00
(1 year ago)
Vulnerability scanning / probing & Brute Force attempts. Empty user agent, HTTP Version: HTTP/1.1, M ...
show more
Vulnerability scanning / probing & Brute Force attempts. Empty user agent, HTTP Version: HTTP/1.1, Method: GET, ASN: AS8075 MICROSOFT-CORP-MSN-AS-BLOCK.
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TheEndBoss_101
2024-11-21 17:18:31
(1 year ago)
AUTO - F2B - bad500\n[21/Nov/2024:17:18:28 +0000] - 503 503 - GET https www.theendboss101.com "/test ...
show more
AUTO - F2B - bad500\n[21/Nov/2024:17:18:28 +0000] - 503 503 - GET https www.theendboss101.com "/test.php" [Client 52.236.125.237] [Length 18785] [Gzip -] [Sent-to 192.168.0.105] "-" "-"
[21/Nov/2024:17:18:28 +0000] - 503 503 - GET https www.theendboss101.com "/.well-known/plugins.php" [Client 52.236.125.237] [Length 18785] [Gzip -] [Sent-to 192.168.0.105] "-" "-"
[21/Nov/2024:17:18:29 +0000] - 503 503 - GET https www.theendboss101.com "/.well-known/iwpairbj.php" [Client 52.236.125.237] [Length 18785] [Gzip -] [Sent-to 192.168.0.105] "-" "-"
[21/Nov/2024:17:18:30 +0000] - 503 503 - GET https www.theendboss101.com "/wp-admin/css/colors/blue/blkafewl.php" [Client 52.236.125.237] [Length 18785] [Gzip -] [Sent-to 192.168.0.105] "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
joetaylor.dev
2024-11-21 15:44:34
(1 year ago)
[Thu Nov 21 15:44:21.811608 2024] [authz_core:error] [pid 332809:tid 136864008767168] [client 52.236 ...
show more
[Thu Nov 21 15:44:21.811608 2024] [authz_core:error] [pid 332809:tid 136864008767168] [client 52.236.125.237:0] AH01630: client denied by server configuration: /var/www/vhosts/biosite.uk/httpdocs/profile.php
[Thu Nov 21 15:44:22.805203 2024] [authz_core:error] [pid 332809:tid 136863740331712] [client 52.236.125.237:0] AH01630: client denied by server configuration: /var/www/vhosts/biosite.uk/httpdocs/tools.php
[Thu Nov 21 15:44:22.897685 2024] [authz_core:error] [pid 332809:tid 136863729845952] [client 52.236.125.237:0] AH01630: client denied by server configuration: /var/www/vhosts/biosite.uk/httpdocs/moon.php
[Thu Nov 21 15:44:23.512659 2024] [authz_core:error] [pid 332809:tid 136863987795648] [client 52.236.125.237:0] AH01630: client denied by server configuration: /var/www/vhosts/biosite.uk/httpdocs/public/images/class-config.php
[Thu Nov 21 15:44:24.081789 2024] [authz_core:error] [pid 332816:tid 136863864063680] [client 52.236.125.237:0] AH01630: client denied by server configura
...
show less
Brute-Force
Web App Attack
2024-11-21 15:25:34
(1 year ago)
Aggressive web scan
Web App Attack
🇺🇸
S.O.B.A. Dev.
2024-11-21 11:35:16
(1 year ago)
Threat Blocked by BeeHive from (ASN:8075) (Network:MICROSOFT-CORP-MSN-AS-BLOCK) (Host:soba.dev) (Met ...
show more
Threat Blocked by BeeHive from (ASN:8075) (Network:MICROSOFT-CORP-MSN-AS-BLOCK) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2024-11-21T11:35:16Z)
show less
Web Spam
Brute-Force
Web App Attack
2024-11-21 11:32:22
(1 year ago)
Fail2Ban apache-noscript
Bad Web Bot
🇪🇸
el-brujo
2024-11-21 10:34:52
(1 year ago)
Cloudflare WAF: Request Path: /wp-content/plugins/ioptimization/IOptimize.php Request Query: ?rchk H ...
show more
Cloudflare WAF: Request Path: /wp-content/plugins/ioptimization/IOptimize.php Request Query: ?rchk Host: elhacker.net userAgent: Action: log Source: firewallManaged ASN Description: MICROSOFT-CORP-MSN-AS-BLOCK Country: IE Method: GET Timestamp: 2024-11-21T10:34:52Z ruleId: 9f35644b7f734c87a57cfd6d8b036974. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
2024-11-21 10:03:43
(1 year ago)
wordpress-trap
Web App Attack
🇫🇷
COMAITE
2024-11-21 09:49:09
(1 year ago)
Multiple web server 400 error codes from same source ip 52.236.125.237.
Web App Attack
2024-11-21 01:36:31
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇩🇪
joetaylor.dev
2024-11-20 22:06:31
(1 year ago)
[Wed Nov 20 22:06:22.241470 2024] [authz_core:error] [pid 238850:tid 136863482382016] [client 52.236 ...
show more
[Wed Nov 20 22:06:22.241470 2024] [authz_core:error] [pid 238850:tid 136863482382016] [client 52.236.125.237:0] AH01630: client denied by server configuration: /var/www/vhosts/biosite.uk/httpdocs/about.php
[Wed Nov 20 22:06:22.326342 2024] [authz_core:error] [pid 238850:tid 136864029738688] [client 52.236.125.237:0] AH01630: client denied by server configuration: /var/www/vhosts/biosite.uk/httpdocs/admin.php
[Wed Nov 20 22:06:22.421004 2024] [authz_core:error] [pid 238850:tid 136863471896256] [client 52.236.125.237:0] AH01630: client denied by server configuration: /var/www/vhosts/biosite.uk/httpdocs/as.php
[Wed Nov 20 22:06:22.507474 2024] [authz_core:error] [pid 238850:tid 136863461410496] [client 52.236.125.237:0] AH01630: client denied by server configuration: /var/www/vhosts/biosite.uk/httpdocs/autoload_classmap.php
[Wed Nov 20 22:06:22.582179 2024] [authz_core:error] [pid 238822:tid 136863893423808] [client 52.236.125.237:0] AH01630: client denied by server configuration: /var/ww
...
show less
Brute-Force
Web App Attack
2024-11-20 20:42:09
(1 year ago)
52.236.125.237 - - [20/Nov/2024:21:42:08 +0100] "GET ///wp-2019.php HTTP/1.1" 403 3686
...
Web App Attack